[El-errata] ELSA-2008-0561 Moderate: Enterprise Linux 4 ruby security update

Errata Announcements for Enterprise Linux el-errata at oss.oracle.com
Mon Jul 14 17:03:51 PDT 2008


Enterprise Linux Security Advisory ELSA-2008-0561

https://rhn.redhat.com/errata/RHSA-2008-0561.html

The following updated rpms for Enterprise Linux 4 have been uploaded to 
the Unbreakable Linux Network:

i386:
irb-1.8.1-7.el4_6.1.i386.rpm
ruby-1.8.1-7.el4_6.1.i386.rpm
ruby-devel-1.8.1-7.el4_6.1.i386.rpm
ruby-docs-1.8.1-7.el4_6.1.i386.rpm
ruby-libs-1.8.1-7.el4_6.1.i386.rpm
ruby-mode-1.8.1-7.el4_6.1.i386.rpm
ruby-tcltk-1.8.1-7.el4_6.1.i386.rpm

x86_64:
irb-1.8.1-7.el4_6.1.x86_64.rpm
ruby-1.8.1-7.el4_6.1.x86_64.rpm
ruby-devel-1.8.1-7.el4_6.1.x86_64.rpm
ruby-docs-1.8.1-7.el4_6.1.x86_64.rpm
ruby-libs-1.8.1-7.el4_6.1.i386.rpm
ruby-libs-1.8.1-7.el4_6.1.x86_64.rpm
ruby-mode-1.8.1-7.el4_6.1.x86_64.rpm
ruby-tcltk-1.8.1-7.el4_6.1.x86_64.rpm

ia64:
irb-1.8.1-7.el4_6.1.ia64.rpm
ruby-1.8.1-7.el4_6.1.ia64.rpm
ruby-devel-1.8.1-7.el4_6.1.ia64.rpm
ruby-docs-1.8.1-7.el4_6.1.ia64.rpm
ruby-libs-1.8.1-7.el4_6.1.i386.rpm
ruby-libs-1.8.1-7.el4_6.1.ia64.rpm
ruby-mode-1.8.1-7.el4_6.1.ia64.rpm
ruby-tcltk-1.8.1-7.el4_6.1.ia64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/ruby-1.8.1-7.el4_6.1.src.rpm


Description of changes:

[1.8.1-7.el4_6.1]
- security fixes. (#451926)
- CVE-2008-2662: Integer overflow in rb_str_buf_append().
- CVE-2008-2663: Integer overflow in rb_ary_store().
- CVE-2008-2664: Unsafe use of alloca in rb_str_format().
- CVE-2008-2725: Integer overflow in rb_ary_update().
- CVE-2008-2726: Integer overflow in rb_ary_update().
- CVE-2008-2376: Integer overflow in rb_ary_fill().





More information about the El-errata mailing list